$ rpki-client -vvf rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft File: rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft (raw, json) Hash identifier: gjgHFsKomeayeWq164ZwHVf+H+EZkzhbZx6SF8i7zTU= Subject key identifier: 61:03:07:E4:65:F6:5C:0F:AD:23:9B:D2:1B:BE:0D:F0:04:77:62:9B Authority key identifier: AF:02:EB:41:3C:5C:05:31:75:C6:FC:BC:19:C6:93:60:63:E7:68:11 Certificate issuer: /CN=A91174DD/serialNumber=AF02EB413C5C053175C6FCBC19C6936063E76811 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwLrQTxcBTF1xvy8GcaTYGPnaBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft Manifest number: 2C Signing time: Sun 05 Apr 2026 08:04:33 +0000 Manifest this update: Sun 05 Apr 2026 08:04:33 +0000 Manifest next update: Sun 12 Apr 2026 08:04:33 +0000 Files and hashes: 1: rwLrQTxcBTF1xvy8GcaTYGPnaBE.crl (hash: nMHlt9vT1MpBI1uDf3BkLCAdkXJYPefrvRcDg0Q1/fs=) 2: A6977620FC6911F0B9F21353506F56BC.roa (hash: 2+c+kkZNH5WFLaEH+Mtz0KAlZ3T9lg2Gax329RYsTqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.crl rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwLrQTxcBTF1xvy8GcaTYGPnaBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:04:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91174DD, serialNumber=AF02EB413C5C053175C6FCBC19C6936063E76811 Validity Not Before: Apr 5 08:04:33 2026 GMT Not After : Apr 12 08:04:33 2026 GMT Subject: CN=69d21791-9f73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4f:48:39:47:74:53:76:63:98:e3:92:d8:54: 74:bc:52:3b:f2:65:b5:0c:ba:3d:9e:38:07:0a:fd: f5:83:c8:fb:10:fe:8e:2f:ea:35:1d:3a:84:b3:26: 1b:87:36:e6:5f:5c:fc:75:c3:ed:59:38:12:4e:29: b8:ab:9c:d0:cc:f7:4d:08:3b:09:40:76:a8:8a:81: 0f:8c:a5:67:8f:8a:f8:49:5f:e5:f0:0e:14:1e:e9: 52:93:42:71:94:62:21:00:3c:2f:c6:e7:05:6f:4d: 61:06:7f:d6:50:4b:29:56:bb:19:4b:b4:35:ac:4e: 81:71:90:90:8a:26:0a:d2:e8:fe:68:01:e5:8b:21: 26:6a:88:6b:74:5d:0d:fe:93:c4:89:25:a5:35:1b: df:a4:15:0c:e8:84:6b:8f:da:c5:86:5b:30:78:42: bb:c4:cd:b8:0a:e8:7c:4a:41:79:ca:34:15:65:c9: fa:d3:34:42:fe:67:32:93:0e:ad:4d:f8:ca:d6:ee: 8e:9f:51:df:9b:92:90:a9:2f:7d:af:89:9c:cf:4e: 60:db:ff:74:66:76:41:d6:3d:48:a3:42:02:b8:7d: 8d:ac:23:ee:b6:6f:17:77:48:42:4b:a4:fd:6b:cb: 3c:56:33:e5:ad:03:d1:7c:8e:4e:8a:69:f5:c3:06: d7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:03:07:E4:65:F6:5C:0F:AD:23:9B:D2:1B:BE:0D:F0:04:77:62:9B X509v3 Authority Key Identifier: keyid:AF:02:EB:41:3C:5C:05:31:75:C6:FC:BC:19:C6:93:60:63:E7:68:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwLrQTxcBTF1xvy8GcaTYGPnaBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:2f:29:be:f1:3e:3f:63:c9:df:9d:86:fa:d5:fb:72:84:b5: 97:19:6c:37:67:08:d3:20:3c:e7:51:a2:18:f8:ee:b9:2b:77: d6:5d:19:41:82:cc:fb:17:b0:bb:59:38:68:51:94:98:f7:db: 55:30:2f:e0:c7:30:06:74:b0:2a:00:85:1f:8b:ed:e2:c6:f5: ad:5c:3e:cb:6a:03:c8:af:d3:ea:b0:45:4c:37:ca:3b:bd:8d: b4:ae:5d:31:32:bd:3a:22:27:e0:c1:d4:94:54:38:29:63:c2: ba:37:6c:48:38:40:7b:a1:7b:8c:86:29:9d:da:72:78:de:33: 83:3d:0d:12:db:c4:ba:7f:15:34:67:1f:42:22:1c:a3:9a:7d: 17:69:2d:db:61:4f:53:d1:1e:d1:1b:03:bf:6e:6c:46:d4:6b: ff:f4:5c:61:e5:97:d8:db:01:d8:ed:ed:a0:3b:90:a7:22:6b: ac:9f:2c:9c:f7:26:b0:8b:ce:89:61:80:7b:f5:e0:45:f0:bd: d2:e7:39:4c:f2:9f:41:8a:0e:2b:08:95:5c:d5:c2:22:b4:a2: 49:52:cd:de:4d:3c:e4:98:0b:3b:f5:48:13:4f:b2:27:68:3e: 90:c3:d5:31:cc:32:51:8b:0f:c5:9d:41:d0:05:73:21:b9:32: 89:5e:ea:7a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NzRERDExMC8GA1UEBRMoQUYwMkVCNDEzQzVDMDUzMTc1QzZGQ0JDMTlDNjkzNjA2 M0U3NjgxMTAeFw0yNjA0MDUwODA0MzNaFw0yNjA0MTIwODA0MzNaMBgxFjAUBgNV BAMTDTY5ZDIxNzkxLTlmNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOT0g5R3RTdmOY45LYVHS8UjvyZbUMuj2eOAcK/fWDyPsQ/o4v6jUdOoSzJhuH NuZfXPx1w+1ZOBJOKbirnNDM900IOwlAdqiKgQ+MpWePivhJX+XwDhQe6VKTQnGU YiEAPC/G5wVvTWEGf9ZQSylWuxlLtDWsToFxkJCKJgrS6P5oAeWLISZqiGt0XQ3+ k8SJJaU1G9+kFQzohGuP2sWGWzB4QrvEzbgK6HxKQXnKNBVlyfrTNEL+ZzKTDq1N +MrW7o6fUd+bkpCpL32viZzPTmDb/3RmdkHWPUijQgK4fY2sI+62bxd3SEJLpP1r yzxWM+WtA9F8jk6KafXDBtdJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUYQMH5GX2 XA+tI5vSG74N8AR3YpswHwYDVR0jBBgwFoAUrwLrQTxcBTF1xvy8GcaTYGPnaBEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3NEREL0UyRTk5RkJDRjVE MDExRjBBMDY1MTdEMjQ3NkY1NkJDL3J3THJRVHhjQlRGMXh2eThHY2FUWUdQbmFC RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcndMclFUeGNCVEYxeHZ5OEdjYVRZR1BuYUJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3 NEREL0UyRTk5RkJDRjVEMDExRjBBMDY1MTdEMjQ3NkY1NkJDL3J3THJRVHhjQlRG MXh2eThHY2FUWUdQbmFCRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCeLym+8T4/Y8nfnYb61ftyhLWXGWw3ZwjTIDznUaIY+O65K3fWXRlBgsz7F7C7 WThoUZSY99tVMC/gxzAGdLAqAIUfi+3ixvWtXD7LagPIr9PqsEVMN8o7vY20rl0x Mr06IifgwdSUVDgpY8K6N2xIOEB7oXuMhimd2nJ43jODPQ0S28S6fxU0Zx9CIhyj mn0XaS3bYU9T0R7RGwO/bmxG1Gv/9Fxh5ZfY2wHY7e2gO5CnImusnyyc9yawi86J YYB79eBF8L3S5zlM8p9Big4rCJVc1cIitKJJUs3eTTzkmAs79UgTT7InaD6Qw9Ux zDJRiw/FnUHQBXMhuTKJXup6 -----END CERTIFICATE-----Generated at Sun Apr 5 19:58:25 2026 by rpki-client